#Kql
Showing 10 of 10 repositories tagged #kql, ranked by stars
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).
A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).
KQL Queries. Microsoft Defender, Microsoft Sentinel
Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant.
Repository for SOC analysts, queries to investigate, advanced hunting, sites for analysis, malware samples, courses to improve skills, IOC and monitoring.
Ian Hanley's deceptively simple KQL queries.
This solution accelerator provides the architecture and working solution for real-time intelligence for operations. Key features include real-time dashboard, anomaly detection, and fabric data agent.
Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing vulnerabilities and simulating advanced attacks across Azure, Entra ID, AWS, and M365.